This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/xE1mwTKzQDbk79YJ7PIMthkjSqo.asa File: xE1mwTKzQDbk79YJ7PIMthkjSqo.asa (raw, json) Hash identifier: YyhspqR7mOuHCVepylY/A74k3bsEO/zYUAHhZJuP0qE= Subject key identifier: C4:4D:66:C1:32:B3:40:36:E4:EF:D6:09:EC:F2:0C:B6:19:23:4A:AA Certificate issuer: /CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Certificate serial: 019ADA52C27ECB74D8B4BEB04C54B9688190 Authority key identifier: D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/xE1mwTKzQDbk79YJ7PIMthkjSqo.asa Signing time: Mon 01 Dec 2025 14:30:48 +0000 ASPA not before: Mon 01 Dec 2025 14:30:48 +0000 ASPA not after: Wed 01 Jul 2026 00:00:00 +0000 Customer ASID: 35168 Providers: AS: 3216 AS: 6695 AS: 8631 AS: 9002 AS: 20485 AS: 31133 AS: 35104 AS: 43727 AS: 60299 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:52:c2:7e:cb:74:d8:b4:be:b0:4c:54:b9:68:81:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6d7285e92b7402e95dbda27bfbef71a8e227cd4 Validity Not Before: Dec 1 14:30:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c44d66c132b34036e4efd609ecf20cb619234aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:62:d3:ad:91:32:8c:43:cd:94:65:b5:99:9a: 1b:31:75:6f:f9:bd:0c:8f:9a:55:46:f3:d0:82:23: 49:e4:32:cc:2f:bb:f3:e4:60:f3:4b:4d:71:57:2c: 93:d0:7e:bc:c3:08:6d:6f:06:f2:59:a8:0a:79:eb: 0d:7b:f0:e5:7b:02:4e:89:a8:dd:8d:6e:81:6a:d3: 52:0a:f8:3f:fd:18:86:fd:40:c2:0f:9a:76:e6:78: 25:f2:93:51:9c:5a:ca:f8:09:c9:6c:23:f8:35:84: 6a:f7:35:e4:5f:8f:ef:f5:39:1e:b6:b8:c6:21:c3: 00:a0:21:19:dd:15:13:7d:98:22:24:49:e5:76:14: 06:3f:c8:03:a0:f5:08:81:c4:f3:fd:9d:31:90:7f: ee:c3:79:a2:ca:e4:2e:a5:4e:5b:74:3b:7e:01:79: 30:7f:65:5a:22:77:6c:e6:cf:54:c3:08:24:9d:99: 09:73:72:7e:38:bb:61:a8:58:b7:6a:c9:d4:be:31: f7:80:b1:58:17:5f:73:50:0d:c9:57:6a:7c:c2:de: f4:00:7f:b2:c9:1d:d0:58:32:90:2f:a6:43:09:d0: d4:6d:2b:1c:47:ee:5a:4d:e4:76:ad:d5:28:ee:3a: 0f:b5:15:bf:29:fa:f9:dd:bd:ed:fd:8f:ae:11:ee: 55:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:4D:66:C1:32:B3:40:36:E4:EF:D6:09:EC:F2:0C:B6:19:23:4A:AA X509v3 Authority Key Identifier: keyid:D6:D7:28:5E:92:B7:40:2E:95:DB:DA:27:BF:BE:F7:1A:8E:22:7C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tcoXpK3QC6V29onv773Go4ifNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/xE1mwTKzQDbk79YJ7PIMthkjSqo.asa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a993d-b92f-4ec0-b300-d55f5e0ff43f/1/1tcoXpK3QC6V29onv773Go4ifNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 35168 Signature Algorithm: sha256WithRSAEncryption 18:6a:41:aa:f6:07:e7:3a:f4:59:d9:ac:fa:93:d1:da:e1:7a: b6:41:76:16:46:6f:e4:a3:20:4b:72:64:e0:8b:8a:e7:10:3f: 8d:50:d8:54:4e:a1:1c:d8:8b:89:3f:c6:56:89:bf:83:72:29: a2:b4:59:f8:b6:0a:8e:2a:ff:83:9a:84:0d:16:31:62:3c:1a: f9:91:0f:fb:9c:1c:48:3d:f2:4a:23:0f:d4:c9:85:45:f1:0e: fc:dd:fd:77:64:68:17:6c:5f:3f:0d:32:8f:4a:9b:af:ed:11: 27:f5:cf:44:c4:56:d7:45:90:a5:87:c4:b0:cc:10:d5:47:eb: 55:a5:ac:72:76:f1:b9:92:db:e9:f4:5e:27:7b:a7:e2:f5:c7: 8a:1d:b8:4b:79:f4:b4:e4:6c:da:24:67:d4:c6:f3:05:4b:bf: ca:ed:c3:71:8c:ee:62:8d:1b:87:b8:6c:6c:9e:c7:20:55:ec: 81:10:b7:db:81:97:23:ae:54:37:8e:bb:c0:38:59:d4:b4:22: fc:04:fa:48:93:40:bb:bf:8f:b2:f9:ed:d1:fb:f6:91:2b:0e: 31:12:ad:bb:32:6b:04:6d:e4:fb:cb:db:1e:ff:73:e7:2f:e1: b0:3f:84:ff:d0:a4:d9:71:0d:82:3a:ce:00:5a:04:be:d9:59: f9:c5:1f:82 -----BEGIN CERTIFICATE----- MIIE+DCCA+CgAwIBAgISAZraUsJ+y3TYtL6wTFS5aIGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2ZDcyODVlOTJiNzQwMmU5NWRiZGEyN2JmYmVmNzFhOGUy MjdjZDQwHhcNMjUxMjAxMTQzMDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNDRkNjZjMTMyYjM0MDM2ZTRlZmQ2MDllY2YyMGNiNjE5MjM0YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WLTrZEyjEPNlGW1mZobMXVv+b0M j5pVRvPQgiNJ5DLML7vz5GDzS01xVyyT0H68wwhtbwbyWagKeesNe/DlewJOiajd jW6BatNSCvg//RiG/UDCD5p25ngl8pNRnFrK+AnJbCP4NYRq9zXkX4/v9TketrjG IcMAoCEZ3RUTfZgiJEnldhQGP8gDoPUIgcTz/Z0xkH/uw3miyuQupU5bdDt+AXkw f2VaInds5s9UwwgknZkJc3J+OLthqFi3asnUvjH3gLFYF19zUA3JV2p8wt70AH+y yR3QWDKQL6ZDCdDUbSscR+5aTeR2rdUo7joPtRW/Kfr53b3t/Y+uEe5VvwIDAQAB o4ICBDCCAgAwHQYDVR0OBBYEFMRNZsEys0A25O/WCezyDLYZI0qqMB8GA1UdIwQY MBaAFNbXKF6St0AuldvaJ7++9xqOInzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAt ZDU1ZjVlMGZmNDNmLzEveEUxbXdUS3pRRGJrNzlZSjdQSU10aGtqU3FvLmFzYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTk5M2QtYjkyZi00ZWMwLWIzMDAtZDU1ZjVlMGZmNDNm LzEvMXRjb1hwSzNRQzZWMjlvbnY3NzNHbzRpZk5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCJYDANBgkqhkiG 9w0BAQsFAAOCAQEAGGpBqvYH5zr0Wdms+pPR2uF6tkF2FkZv5KMgS3Jk4IuK5xA/ jVDYVE6hHNiLiT/GVom/g3IporRZ+LYKjir/g5qEDRYxYjwa+ZEP+5wcSD3ySiMP 1MmFRfEO/N39d2RoF2xfPw0yj0qbr+0RJ/XPRMRW10WQpYfEsMwQ1UfrVaWscnbx uZLb6fReJ3un4vXHih24S3n0tORs2iRn1MbzBUu/yu3DcYzuYo0bh7hsbJ7HIFXs gRC324GXI65UN467wDhZ1LQi/AT6SJNAu7+Psvnt0fv2kSsOMRKtuzJrBG3k+8vb Hv9z5y/hsD+E/9Ck2XENgjrOAFoEvtlZ+cUfgg== -----END CERTIFICATE-----Generated at Sat Dec 6 04:11:41 2025 by rpki-client